How to Trace an Spammer

We have an Spammer sending email now from our server.
How can we know what user is it?

I tryied with grep -i globalleads@0-0.net exim_mainlog where "globalleads@0-0.net" is header address (that we don't host) and only show me 2001-09-26 00:18:42 15m69h-0001WS-00 => globalleads@0-0.net R=lookuphost T=remote_smtp H=mail.0-0.net [xxx.xxx.xxx.xxx]
Also tried with a ps aux to see if they are sending out throug a formmail but no How to Trace an Spammer
Any help?

 

 

 

 

Top